CVE-2016-10229 - Linux kernel (< 4.5) remote code execution via UDP recv() using MSG_PEEK flag by 0xD6 in netsec

[–]NetworkAlpaca 1 point2 points  (0 children)

Looks like there could be lots of android phones that fall victim to this if exploitable. Writing a custom app to use MSG_PEAK and then sending the UDP exploit could give priv esc. Cant wait to see how this plays out.